LoginSecurity
LoginSecurity
LoginSecurity is a lightweight password authorization plugin. You can optionally set a password each time you enter the server, adding a double layer of security to your account. The password is stored inside the configuration file, nobody else except the server owner can access or modify it.
How does it work?
Install the pluign to your /plugins/ directory, then start your server.
Type /register <password>, your account is now locked with a password.
For each time you login, make sure to use /login <password>.
Features
- Register your account optional or required (change in config)
- 5 Useful commands to mangage your password
- Advanced administrative control
- Advanced documentation via wiki
- Secure password storage using BCrypt
- Secure sessions storing to improve user experience
- Customizable time-out
- Map captcha upon registration (user friendly)
- Conversion from AuthMe and xAuth (check wiki for more info)
- Premium support through AutoIn
- Automatic update with changelog overview
- Username filtering (length and characters)
- Highly detailed configuration
- Automatically updated translation manager (user-submitted)
- Prevents being kicked by orther players loging in with your name
Session login allows the user to log in right after they logged out and not have to type in their password again. (1 minute time limit of being logged out, stores IP during that time to keep everything safe)
Commands
/lac - Admin command, rmpass and reload
/register <password> - Set your password
/login <password> - Login with your password
/changepass <old> <new> - change your password
/logout - Logout
Permissions
- loginsecurity.admin - allows admin command
- loginsecurity.update - shows update notifications
Video
Thanks to ServerMiner for making this informative tutorial
Orther tutorials: German (by MineCraftler4Live)
Planned
- Add translation interface for easier language selection
- Suggestions?
Known Bugs
- Players can mount/dismount and ride on vehicles while not logged in
Disclaimer
By default, LoginSecurity will check for updates from bukkitdev every 3 hours.
This feature can be disabled by setting "update-checker" to "false"
Anyone with the permission node ls.admin will be notified of updates, and it also able to download them via /lac update.
Which again can be disabled by disabling the update-checker
This plugin utilises Hidendra's plugin metrics system, which means that the following information is collected and sent to mcstats.org:
- A unique identifier
- The server's version of Java
- Whether the server is in offline or online mode
- The plugin's version
- The server's version
- The OS version/name and architecture
- The core count for the CPU
- The number of players online
The Metrics version Opting out of this service can be done by editing plugins/Plugin Metrics/config.yml and changing opt-out to true.
Additionally, when the language setting is changed, information is retrieved from lang.lenis0012.com to aquire up to date translations.
Links
- v3.0.2 - Download (18 - 1.15)
- Source code (GitHub)
- https://github.com/lenis0012/LoginSecurity-2/wiki (Wiki)
- https://github.com/lenis0012/Translations/wiki/Contribute (Translation Contribution)
Donate
If you want to support me working on this project, please donate.
It helps me alot to keep my projects up.
Donate at the top right corner
Comments
-
lenis0012 Owner
-
View User Profile
-
Send Message
Posted Nov 24, 2012thanks, the best passlogin plugin ever! keep up good work
+ that "ip save for 1 minute" is the best feature ever, the most secure plugin if you want to make things work good
-
View User Profile
-
Send Message
Posted Nov 24, 2012You should put something to counter the "Logged in from another location" message
-
View User Profile
-
Send Message
Posted Nov 23, 2012Suggestion : Allow colors to be added to the language folder to change the look of what people see when they log in :)
-
View User Profile
-
Send Message
Posted Nov 22, 2012@Xieno
ill look at that soon
@Troublecrafter
ill be doing some work on admin commands
-
View User Profile
-
Send Message
Posted Nov 22, 2012Can you add a delay before the login message is shown? it appears before all other text on server welcome messages.
Also, why does it ask a user who has a username/login to register periodically when the first log in?
-
View User Profile
-
Send Message
Posted Nov 22, 2012Hi lenis0012,
I've tried "/lac changePass *Playername* *Newpassword*" and got the positive feedback that the password of *Playername* has been changed (permissions were set to me). However when the player *Playername* tries to login the password is not accepted.
Do you have a clue what's missing?
Thanks and regards, Troublecrafter
-
View User Profile
-
Send Message
Posted Nov 22, 2012I have a suggestion: Could you maybe add a permission which when given to a player exempts them from the password requirment on login? It would be useful to give to the lower ranks of my server, while keeping the higher ranks password protected, as alot of my users say it is rather annoying... especially new members of the server. THANK YOU :D
-
View User Profile
-
Send Message
Posted Nov 22, 2012I upload it but it not all work.http://dev.bukkit.org/server-mods/loginsecurity/pages/language-creating/
-
View User Profile
-
Send Message
Posted Nov 22, 2012@ironsmith123
You can edit the language file to your needs.
-
View User Profile
-
Send Message
Posted Nov 21, 2012I have a feature request:
PLEASE make the "please register" text customizable so for instance I could have a note with it that says "Note: Don't use your Minecraft password for this" or something along those lines.
Thanks for your time, great plugin! ^_^
-Iron
-
View User Profile
-
Send Message
Posted Nov 21, 2012@DeepSurfer
cause bukkit does that
-
View User Profile
-
Send Message
Posted Nov 21, 2012thx for next generation of AthMe, but why you hash password when the password in real-text come up in the Server.log from login of user ?
greets Deep
-
View User Profile
-
Send Message
Posted Nov 20, 2012@AniKaBa
download a custom language. and if there is no one available for your language, create one.
anorther release comming today
-
View User Profile
-
Send Message
Posted Nov 20, 2012Thank you for the 1.6.5 plug-ins.
Err 1.
Completion of modify.
Err 2.
session :Invalid.
timeout :Completion of modify.
Err 3.
/changepass set new password can break length limit.
Err 4.
No permissions: '您沒有權限執行此命令！' This is my Language.
But,It show "No permissions",Not my setting.
Forgive my bad English
-
View User Profile
-
Send Message
Posted Nov 20, 2012running craftbukkit beta 1.4.5. and your latest version.
[WARNING] Could not properly handle event PLAYER_QUIT:
java.lang.IllegalAccessError: Synchronized code got accessed from another thread: java.util.concurrent.ThreadPoolExecutor$Worker
at org.bukkit.event.NLTCListener.onPlayerQuit(NLTCListener:0)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at org.bukkit.plugin.java.JavaPluginLoader$1.execute(JavaPluginLoader.java:339)
at org.bukkit.plugin.RegisteredListener.callEvent(RegisteredListener.java:62)
at org.bukkit.plugin.SimplePluginManager.fireEvent(SimplePluginManager.java:477)
at org.bukkit.plugin.SimplePluginManager.callEvent(SimplePluginManager.java:462)
at net.minecraft.server.ServerConfigurationManagerAbstract.disconnect(ServerConfigurationManagerAbstract.java:201)
at net.minecraft.server.NetServerHandler.disconnect(NetServerHandler.java:167)
at org.bukkit.craftbukkit.entity.CraftPlayer.kickPlayer(CraftPlayer.java:216)
at me.lenis0012.ls.lsLogin$1.run(lsLogin.java:96)
at org.bukkit.craftbukkit.scheduler.CraftTask.run(CraftTask.java:53)
at org.bukkit.craftbukkit.scheduler.CraftAsyncTask.run(CraftAsyncTask.java:53)
at java.util.concurrent.ThreadPoolExecutor$Worker.runTask(ThreadPoolExecutor.java:886)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:908)
14:52:06 [INFO] This error is logged only once: it could have occurred multiple times by now.
14:52:06 [INFO] Potential failures may occur in other plugins handling this Event.
-
View User Profile
-
Send Message
Posted Nov 20, 2012Hi i found a bug. If you join with a name who is already registered, you can type again /setpass *anything* and youre online with the other's account.. (sry that grammar im from germany)
-
View User Profile
-
Send Message
Posted Nov 19, 2012Released v1.6.5
Fixed some major bugs.
Check ChangeLog for more info.
-
View User Profile
-
Send Message
Posted Nov 19, 2012@AniKaBa
ill fix all of it:
Err 1: I found this out just today (not smart to post here though)
Err 2: ik im fixing that as well
Err 3: i did not know that yet
Err 4: ???
-
View User Profile
-
Send Message
Posted Nov 19, 2012Known Bugs:No bugs known. What i say this a joke. Err 1. If i set my password and logout server. It request login ago ,but i can /setpass new password and login by new password. Err 2. Login session and timeout it fail. Err 3. /changepass set new password can Ignore password length. Err 4. No permissions message does not display properly. Forgive my bad English
-
View User Profile
-
Send Message
Posted Nov 18, 2012@ieatcalcium Have you tried setting the following? password-required: true blindness: true Or are you looking for something else?